This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json) Hash identifier: ifemgOALoY0UftJ3oaYCrj9aNsp1USh1Ff+yZ2Fdbb4= Subject key identifier: 00:8C:96:36:23:17:3A:32:12:44:32:64:56:B4:E1:5B:41:00:6F:CC Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b Certificate serial: 019B44377DEDE026897D4E668AAEC9DDF759 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft Manifest number: 0481 Signing time: Mon 22 Dec 2025 04:00:45 +0000 Manifest this update: Mon 22 Dec 2025 04:00:45 +0000 Manifest next update: Tue 23 Dec 2025 04:00:45 +0000 Files and hashes: 1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: jgMHLCSWsdT2bwi+f+4QFCWpKtBc0G6njbhmUxKeUAc=) 2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=) 3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:7d:ed:e0:26:89:7d:4e:66:8a:ae:c9:dd:f7:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b Validity Not Before: Dec 22 04:00:45 2025 GMT Not After : Dec 23 04:00:45 2025 GMT Subject: CN=008c963623173a321244326456b4e15b41006fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:be:ae:e6:2a:0b:fe:8a:6e:d0:c7:a6:9f:89: 4d:3a:9f:93:eb:f6:2c:b5:d7:2a:95:5f:cb:e0:99: 7b:5c:da:65:42:ac:59:96:5a:b5:d0:2a:b8:e8:02: 93:95:5b:3c:ae:0f:ed:27:31:ad:ae:23:fc:2d:e0: 48:7f:f2:fb:c6:e6:5e:21:46:f7:56:94:9d:cf:f9: d6:6f:f9:80:e1:80:a3:b6:94:81:e5:9a:95:cc:e5: a5:89:70:1a:45:ed:3f:ab:58:1d:80:b3:85:12:50: 34:8d:bc:83:ec:32:62:12:e8:e7:08:11:2e:9e:39: e0:41:f3:5a:ec:df:25:f5:99:57:4a:96:b1:c6:17: 60:4d:dc:ac:a5:bf:f0:d6:af:00:cc:ec:d3:e5:c7: 80:89:ab:94:e0:ab:ab:e3:47:c7:95:22:0a:da:4d: e2:aa:c8:0d:e0:ab:b1:6e:10:c1:75:ca:c5:b2:63: 9b:ff:1c:b8:49:b0:2d:48:4c:30:cc:0e:39:b7:17: 87:f4:a4:07:e6:cf:94:8f:57:67:cd:b7:18:b8:37: 0d:11:e6:af:f0:7a:91:11:93:17:33:47:78:2c:94: 17:b5:f4:3a:36:b4:e9:bc:ca:78:72:e3:9f:97:b3: 99:fe:df:00:2b:56:e3:9b:8b:ab:0f:15:aa:06:bb: a2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8C:96:36:23:17:3A:32:12:44:32:64:56:B4:E1:5B:41:00:6F:CC X509v3 Authority Key Identifier: keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1d:f2:c9:2a:f4:c9:91:ce:6a:8b:94:b1:ce:d3:a8:cb:e6: f5:5b:d3:d7:5c:62:20:81:51:a2:67:01:8b:f0:6b:72:43:29: 63:93:d0:df:2b:4d:53:27:87:a2:51:5c:16:85:9a:0d:3d:b1: 75:df:1a:7b:c7:b2:a4:57:7f:d2:23:9c:56:9b:3a:90:38:e4: 99:11:55:ce:12:87:80:1b:b5:d6:35:a3:88:79:70:13:a0:50: 15:0c:c7:1b:a0:c7:8a:e4:d6:99:79:42:75:d5:75:e5:2c:fe: c0:12:4b:df:92:2d:3d:0a:23:08:64:30:df:41:45:9e:49:c3: 33:bd:c4:11:2c:ab:a4:ea:03:aa:42:a6:6e:99:71:15:3c:32: e9:5a:fc:1d:5c:ba:8e:f7:64:bd:74:f2:dd:96:45:ce:df:5a: 77:f0:da:cb:24:a4:97:f9:49:7b:34:0c:24:0a:b4:7f:05:ab: a3:b5:9a:01:17:10:c5:35:ff:71:96:a9:d8:c3:39:7e:5b:6a: 02:e8:d6:ad:42:5f:50:5e:bc:13:32:3e:55:7a:c5:ce:01:03: 9b:2e:9f:c4:09:b6:d4:6f:26:4f:e3:6c:d8:de:6b:85:e3:6b: 9d:24:40:d3:dd:93:b2:cd:50:44:0d:88:fc:eb:aa:60:a7:43: e7:da:be:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN33t4CaJfU5miq7J3fdZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YjhmYjkyMjgwYWIwNWI0NDMyZTQzYjk1NDUwZTczYjI3 NzNkNWIwHhcNMjUxMjIyMDQwMDQ1WhcNMjUxMjIzMDQwMDQ1WjAzMTEwLwYDVQQD EygwMDhjOTYzNjIzMTczYTMyMTI0NDMyNjQ1NmI0ZTE1YjQxMDA2ZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl76u5ioL/opu0Memn4lNOp+T6/Ys tdcqlV/L4Jl7XNplQqxZllq10Cq46AKTlVs8rg/tJzGtriP8LeBIf/L7xuZeIUb3 VpSdz/nWb/mA4YCjtpSB5ZqVzOWliXAaRe0/q1gdgLOFElA0jbyD7DJiEujnCBEu njngQfNa7N8l9ZlXSpaxxhdgTdyspb/w1q8AzOzT5ceAiauU4Kur40fHlSIK2k3i qsgN4KuxbhDBdcrFsmOb/xy4SbAtSEwwzA45txeH9KQH5s+Uj1dnzbcYuDcNEeav 8HqREZMXM0d4LJQXtfQ6NrTpvMp4cuOfl7OZ/t8AK1bjm4urDxWqBruiuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACMljYjFzoyEkQyZFa04VtBAG/MMB8GA1UdIwQY MBaAFAm4+5IoCrBbRDLkO5VFDnOydz1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83MjZkMTUtNWMxOS00ZTg1LWJjNTkt ZGE3Mzk4NTZjZmI4LzEvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83MjZkMTUtNWMxOS00ZTg1LWJjNTktZGE3Mzk4NTZjZmI4 LzEvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZx3yySr0 yZHOaouUsc7TqMvm9VvT11xiIIFRomcBi/BrckMpY5PQ3ytNUyeHolFcFoWaDT2x dd8ae8eypFd/0iOcVps6kDjkmRFVzhKHgBu11jWjiHlwE6BQFQzHG6DHiuTWmXlC ddV15Sz+wBJL35ItPQojCGQw30FFnknDM73EESyrpOoDqkKmbplxFTwy6Vr8HVy6 jvdkvXTy3ZZFzt9ad/DayySkl/lJezQMJAq0fwWro7WaARcQxTX/cZap2MM5fltq AujWrUJfUF68EzI+VXrFzgEDmy6fxAm21G8mT+Ns2N5rheNrnSRA092Tss1QRA2I /OuqYKdD59q+6A== -----END CERTIFICATE-----Generated at Mon Dec 22 13:32:38 2025 by rpki-client